Systems and methods for authentication code entry in touch-sensitive screen enabled devices

ABSTRACT

Systems and methods for authentication code entry in touch-sensitive screen enabled devices are disclosed. In one embodiment, a method for entering data to a data entry device comprising at least one computer processor and a touch-sensitive screen may include (1) the touch-sensitive screen sensing a first input comprising at least one finger touch; (2) the touch-sensitive screen sensing a release of the first input; (3) the at least one computer processor determining a first number of finger touches in the first input; and (4) the at least one computer processor using the first number of finger touches to identify a first portion of an authentication code.

RELATED APPLICATIONS

This application is a Continuation of International Application No.PCT/US16/63285, filed Nov. 22, 2016, which claims the benefit of U.S.Provisional Patent Application Ser. No. 62/258,757 filed Nov. 23, 2015.The disclosures of each of these documents is hereby incorporated byreference in its entirety.

BACKGROUND OF THE INVENTION 1. Field of the Invention

The present disclosure relates generally to input devices, and moreparticularly to systems and methods for authentication code entry intouch-sensitive screen enabled devices.

2. Description of the Related Art

Payment Acceptance Devices often use physical number pads to receivecustomer authentication information, such as Personal IdentificationNumber (PIN) codes. With the advent of touch-sensitive screentechnology, virtual keypads are sometime used for PIN code entry. Unlikea traditional keypad, however, touch-sensitive screens have no tactileclues as to where to push for the PIN numbers, therefore increasing thepossibility of making an error when entering one's PIN. Further, for avisually impaired individual, the lack of tactile clues may require thevisually impaired person to rely on the sales clerk or a third party toinput the PIN. This, of course, is likely to compromise the security ofa payment instrument, such as a credit or debit card.

SUMMARY OF THE INVENTION

Systems and methods for authentication code entry in touch-sensitivescreen enabled devices are disclosed. In one embodiment, a method forentering data to a data entry device comprising at least one computerprocessor and a touch-sensitive screen may include (1) thetouch-sensitive screen sensing a first input comprising at least onefinger touch; (2) the touch-sensitive screen sensing a release of thefirst input; (3) the at least one computer processor determining anumber of finger touches in the first input; and (4) the at least onecomputer processor using the number of finger touches in the first inputto identify at least a first portion of an authentication code.

In one embodiment, the number of finger touches in the first input mayrepresent a digit in the authentication code.

In one embodiment, the method may further include the touch-sensitivescreen sensing, within a first predetermined period of time from therelease of the first input, a second input comprising at least onefinger touch; the touch-sensitive screen sensing a release of the secondinput; the at least one computer processor determining a number offinger touches in the second input; and the at least one computerprocessor using the number of finger touches in the second input toidentify at least a second portion of the authentication code. The atleast one computer processor may sum the number of finger touches in thefirst input and the number of finger touches in the second input,wherein the sum may represent a digit in the authentication code.

In one embodiment, the method may further include the at least onecomputer processor indicating a passage of the first predeterminedperiod of time.

In one embodiment, the method may further include the touch-sensitivescreen receiving, within a second predetermined period of time, a thirdinput comprising at least one finger touch; the touch-sensitive screensensing a release of the third input; the at least one computerprocessor determining a number of finger touches in the third input; andthe at least one computer processor using the number of finger touchesin the third input to identify at least a third portion of theauthentication code. The at least one computer processor may sum thenumber of finger touches in the first input, the number of fingertouches in the second input, and the number of finger touches in thethird input, wherein the sum may represent a digit in the authenticationcode.

The method may further include rejecting the first input, the secondinput, or the third input in response to the first input, the secondinput, or the third input, or the sum of the first input and the secondinput, or the sum of the first input, the second input, or the thirdinput is invalid.

According to another embodiment, a data entry device may include atouch-sensitive screen; a memory; and at least one computer processor.The touch-sensitive screen may sense a first input comprising at leastone finger touch and may sense a release of the first input. The atleast one computer processor determines a number of finger touches inthe first input, and may use the number of finger touches in the firstinput to identify at least a first portion of an authentication code.

In one embodiment, the number of finger touches in the first input mayrepresent a digit in the authentication code.

In one embodiment, the touch-sensitive screen may receive, within afirst predetermined period of time, a second input comprising at leastone finger touch, and may sense a release of the second input. The atleast one computer processor may determine a number of finger touches inthe second input; and may use the number of finger touches in the firstinput and the number of finger touches in the second input to identifyat least a second portion of the authentication code. The at least onecomputer processor may sum the number of finger touches in the firstinput and the number of finger touches in the second input, wherein thesum may represent a digit in the authentication code.

In one embodiment, the touch-sensitive screen may receive, within asecond predetermined period of time, a third input comprising at leastone finger touch, and may sense a release of the third input. The atleast one computer processor may determine a number of finger touches inthe third input and may use the number of finger touches in the firstinput, the number of finger touches in the second input, and the numberof touches in the third input to identify at least a third portion ofthe authentication code. In one embodiment, the at least one computerprocessor may sum the number of finger touches in the first input, thenumber of finger touches in the second input, and the number of fingertouches in the third input, wherein the sum may represent a digit in theauthentication code.

In one embodiment, the data entry device may reject the first input, thesecond input, or the third input in response to the first input, thesecond input, or the third input, or the sum of the first input and thesecond input, or the sum of the first input, the second input, or thethird input is invalid.

In one embodiment, the touch-sensitive screen may sense multiple touchesat a plurality of locations.

According to another embodiment, a method for entering data to a dataentry device comprising at least one computer processor, a memory, and atouch-sensitive screen may include (1) the touch-sensitive screenproviding an input interface comprising a plurality of virtual keys; (2)the touch-sensitive screen sensing a first touch on the touch-sensitivescreen; (3) the touch-sensitive screen sensing a release of the firsttouch and a location of the first touch at the time of release; (4) theat least one computer processor determining a corresponding virtual keybased on the location of the first touch at the time of release; (5) thetouch-sensitive screen receiving an entry gesture; and (6) the at leastone computer processor identifying the corresponding virtual key as adigit in an authentication code.

In one embodiment, the entry gesture may be received at any position onthe touch-sensitive screen.

In one embodiment, the entry gesture may comprise a double tap, acheckmark-shaped touch, etc.

In one embodiment, the method may further include the at least onecomputer processor providing feedback to the user in response to thetouch-sensitive screen being touched in a touch-sensitive area of thetouch-sensitive screen. The feedback may be tactile feedback (e.g.,haptic feedback), a sound, etc.

In one embodiment, the method may further include the at least onecomputer processor providing feedback to the user in response to one ofthe virtual keys being touched.

In one embodiment, the first touch may traverse a plurality of multiplevirtual keys; and the at least one computer processor may providefeedback to the user as the first touch traverses from a first virtualkey to a second virtual key. The feedback may be tactile feedback (e.g.,haptic feedback), a sound, etc.

In one embodiment, the virtual keys may be arranged around a peripheryof the touch-sensitive screen.

According to another embodiment, a data entry device may include atouch-sensitive screen; a memory; and at least one computer processor.The touch-sensitive screen may provide an input interface comprising aplurality of virtual keys, may sense a first touch on thetouch-sensitive screed, and may sense a release of the first touch and alocation of the first touch at the time of release. The at least onecomputer processor may determine a corresponding virtual key based onthe location of the first touch at the time of release. Thetouch-sensitive screen may receive an entry gesture, and the at leastone computer processor may identify the corresponding virtual key as adigit in an authentication code.

In one embodiment, the touch-sensitive screen may sense multiple touchesat a plurality of locations. In one embodiment, the multiple touches maybe substantially simultaneous.

In one embodiment, the entry gesture may be received at any position onthe touch-sensitive screen. The entry gesture may comprise a double tap,a checkmark-shaped touch, etc.

In one embodiment, the touch-sensitive screen may provide tactilefeedback in response to the touch-sensitive screen being touched in atouch-sensitive area of the touch-sensitive screen, such as hapticfeedback.

In one embodiment, the data entry device may further include an audiooutput device that provides audible feedback in response to thetouch-sensitive screen being touched, and/or in response to one of thevirtual keys being touched.

In one embodiment, the virtual keys may be arranged around a peripheryof the touch-sensitive screen.

In one embodiment, the data entry device may further include a bezelsurrounding the touch-sensitive screen. The bezel may be raised relativeto a surface of the touch-sensitive screen. The bezel may also includeone or more orientation marks.

According to another embodiment, a method for entering data to a dataentry device comprising at least one computer processor, a memory, and atouch-sensitive screen, may include: (1) the touch-sensitive screenreceiving a touch-based gesture; (2) the at least one computer processordecoding the touch-based gesture to identify a digit, character, orsymbol that corresponds to the gesture; and (3) the at least onecomputer processor using the digit, character, or symbol as an elementin an authentication code.

In one embodiment, the touch-based gesture may be based on a Braillenumber pattern.

In one embodiment, the touch-based gesture may include a finger drag onthe touch-sensitive screen.

In one embodiment, the touch-based gesture may be received at one ormore quadrants of the touch-sensitive screen, and the computer processordecodes the touch-based gesture based on the one or more quadrants.

According to another embodiment, a data entry device may include atouch-sensitive screen; a memory; and at least one computer processor.The touch-sensitive screen may provide an input interface and mayreceive a touch-based gesture. The at least one computer processor maydecode the touch-based gesture to identify a digit, character, or symbolthat corresponds to the gesture, and may use the digit, character, orsymbol as an element in an authentication code.

In one embodiment, the at least one computer processor may access adatabase that stores an association of a plurality of touch-basedgestures and digits, characters, or symbols, or that stores anassociation of a plurality of finger drag touch-based gestures anddigits, characters, or symbols, or that stores an association oftouch-based gestures at one or more quadrant of the touch-sensitivescreen and digits, etc.

According to another embodiment, a method for entering data to a dataentry device comprising at least one computer processor, a memory, and atouch-sensitive screen may include (1) the touch-sensitive screenproviding an input interface comprising a plurality of virtual keys; (2)the touch-sensitive screen sensing a touch of at least one of thevirtual keys within a predetermined time period; (3) the touch-sensitivescreen sensing a release of the touch; (4) the at least one computerprocessor decoding the touch to identify a digit, character, or symbolthat corresponds to one or more virtual keys that were touched; and (5)the at least one computer processor using the digit, character, orsymbol as an element in an authentication code.

In one embodiment, four virtual keys may be provided. The location ofeach of the plurality of virtual keys on the touch-sensitive screen maybe based on a point at which the touch-sensitive screen is touched.

In another embodiment, the location of each of the plurality of virtualkeys on the touch-sensitive screen may be static or fixed.

According to another embodiment, a data entry device may include atouch-sensitive screen; a memory; and at least one computer processor.The touch-sensitive screen may provide an input interface comprising aplurality of virtual keys, may senses a touch of at least one of thevirtual keys within a predetermined time period, and may sense a releaseof the touch. The at least one computer processor may decode the touchto identify a digit, character, or symbol that corresponds to one ormore virtual keys that were touched, and may use the digit, character,or symbol as an element in an authentication code.

In one embodiment, four virtual keys may be provided. The location ofeach of the plurality of virtual keys on the touch-sensitive screen maybe based on a point at which the touch-sensitive screen is touched.

In another embodiment, the location of each of the plurality of virtualkeys on the touch-sensitive screen may be static or fixed.

In one embodiment, at least one of the at least one computer processormay be a touch-sensitive screen controller.

Any of the data entry devices described herein may be a point of saledevice.

Embodiments disclosed herein relate to a data entry device that mayinclude a touch-sensitive screen operative to provide an outputindicating at least one finger engagement therewith, which at least onefinger engagement represents a PIN, electronic circuitry operative toreceive the output and to provide a multi-digit numerical output inwhich each digit of the multi-digit numerical output represents a digitof the PIN. For example, the electronic circuitry may be operative torecognize finger engagement patterns having a resemblance to Braillenumber configurations and to associate the finger engagement patternswith digits corresponding to the Braille number configurations to allowa visually impaired person to interact with the touchscreen data entrydevice.

Some embodiments of a data entry device may include a non-visualstimulus generator operative to assist a user in at least one oflocating a suitable location for and initiating the at least one fingerengagement therewith. Additionally or alternatively, each digit of themulti-digit numerical output represents a separate two-dimensionalcursive finger engagement. Alternatively or additionally, each digit ofthe multi-digit numerical output may represent a portion of at least onetwo-dimensional cursive finger engagements.

In one embodiment, the non-visual stimulus generator may include atactile stimulus generator. Additionally or alternatively, thenon-visual stimulus generator may also include an audio stimulusgenerator.

In one embodiment, the non-visual stimulus generator may include avariable frequency stimulus generator wherein a change in frequencyindicates the proximity of the user's finger to the suitable location onthe touch-sensitive screen. Additionally or alternatively, thenon-visual stimulus generator may generate user-sensible feedback inresponse to the at least one finger engagement.

In one embodiment, the data entry device may also include at least onenon-PIN entry finger engagement responsive function generator. The atleast one non-PIN entry finger engagement responsive function generatormay include a re-entry prompt generator.

In one embodiment, the non-visual stimulus generator may include atleast one user sensible physical bump having a predetermined locationwith respect to the touch-sensitive screen. Additionally oralternatively, the non-visual stimulus generator may include at leastone vibration generator providing at least one vibration at at least onepredetermined location with respect to the touch-sensitive screen.

In one embodiment, a data entry device may include a touch-sensitivescreen operative to provide an output indicating a number ofsimultaneous finger engagements therewith, which simultaneous fingerengagements may at least partially overlap in time and electroniccircuitry operative to receive the output indicating a number ofsimultaneous finger engagements therewith for a plurality of sequentialoccurrences of simultaneous finger engagements and to provide amulti-digit numerical output in which each digit of the multi-digitnumerical output represents the number of simultaneous fingerengagements in at least one of the plurality of sequential occurrencesof simultaneous finger engagements. For example, a digit “9” may berepresented by simultaneous finger engagements of nine fingers during asingle occurrence. Alternatively, a digit “9” may be represented by twosequential occurrences of first five simultaneous finger engagements andthen four simultaneous finger engagements which occur within apredetermined time period of each other

In one embodiment, each digit of the multi-digit numerical output mayrepresent the number of simultaneous finger engagements in one or moresequential occurrences of simultaneous finger engagements which occurwithin a predetermined time period of each other. In accordance oneembodiment, the electronic circuitry may sum the numbers of simultaneousfinger engagements in the one or more sequential occurrences together,and the digit represents a sum of adding the numbers of simultaneousfinger engagements.

In one embodiment, the digit “0” may be represented by simultaneousfinger engagements in at least two sequential occurrences ofsimultaneous finger engagements which occur within a predetermined timeperiod of each other. For example, a digit “0” may be represented bysimultaneous finger engagements in two sequential occurrences each offive simultaneous finger engagements which occur within thepredetermined time period of each other.

In one embodiment, digits may be represented by simultaneous fingerengagements in one or more sequential occurrences of simultaneous fingerengagements which occur within a predetermined time period of eachother.

In one embodiment, the data entry device may include an input feedbacktransducer that may provide a user-sensible feedback upon expiry of thepredetermined time period following the at least one sequentialoccurrence. In one embodiment, the multi-digit numerical output may be apersonal identification number.

In one embodiment, the data entry device may include an encryptor thatmay encrypt the multi-digit numerical output. The data entry device mayalso include an input feedback transducer that may provide auser-sensible feedback responsive to successful entry of each the digit.

In one embodiment, a data entry device may include a touch-sensitivescreen operative to provide an output indicating at least one fingerengagement therewith, which at least one finger engagement represents aPIN, a non-visual stimulus generator operative to assist a visuallyimpaired user in at least one of locating a suitable location for andinitiating the at least one finger engagement therewith and electroniccircuitry operative to receive the output and to provide a multi-digitnumerical output in which each digit of the multi-digit numerical outputrepresents the PIN.

In one embodiment, each digit of the multi-digit numerical output mayrepresent a separate two-dimensional cursive finger engagement. Eachdigit of the multi-digit numerical output may represent a portion of atleast one two-dimensional cursive finger engagements.

In one embodiment, a user may enter a scribble of a code, such as a PINcode, without a pin-pad device, or enter a gesture that is uniquelyrecognized by the payment acceptance device. The data entry device mayprocess the entry using an algorithm that associates the scribble orgesture with a unique non-payment identifier and a protocol to transmitthe unique nonpayment identifier to the authentication server toauthenticate the user.

In one embodiment, the non-visual stimulus generator may include atactile stimulus generator, which may include an audio stimulusgenerator.

In one embodiment, the non-visual stimulus generator may include avariable frequency stimulus generator wherein a change in frequencyindicates a difference of position of a user's finger relative to asuitable location on the touch-sensitive screen. The non-visual stimulusgenerator may generate user-sensible feedback in response to the atleast one finger engagement.

In one embodiment, the data entry device may include at least onenon-PIN entry finger engagement responsive function generator, which maybe a re-entry prompt generator.

In one embodiment, the non-visual stimulus generator may include atleast one user sensible physical bump that may have a predeterminedlocation with respect to the touch-sensitive screen.

In one embodiment, the non-visual stimulus generator may include atleast one vibration generator providing at least one vibration at atleast one predetermined location with respect to the touch-sensitivescreen.

BRIEF DESCRIPTION OF THE DRAWINGS

For a more complete understanding of the present invention, the objectsand advantages thereof, reference is now made to the followingdescriptions taken in connection with the accompanying drawings inwhich:

FIG. 1 depicts a touch-sensitive screen PIN entry device according toone embodiment;

FIG. 2 depicts a touch-sensitive screen including tactile markersaccording to one embodiment;

FIG. 3 depicts a touch-sensitive screen bezel or surround includingtactile markers according to one embodiment;

FIG. 4 depicts a method for entering data into a touch-sensitive screenenabled data entry device according to one embodiment;

FIG. 5 depicts a method for entering data into a touch-sensitive screenenabled data entry device according to another embodiment;

FIG. 6 depicts a method for entering data into a touch-sensitive screenenabled data entry device according to another embodiment;

FIG. 7 depicts exemplary symbols for entry as touches according to oneembodiment;

FIG. 8 depicts a method for entering data into a touch-sensitive screenenabled data entry device according to another embodiment;

FIG. 9 depicts exemplary touch gestures for entry according to oneembodiment;

FIG. 10 depicts a method for entering data into a touch-sensitive screenenabled data entry device according to another embodiment;

FIGS. 11A and 11B depict exemplary virtual key interfaces according toembodiments;

FIG. 12 depicts an exemplary keying pattern according to one embodiment;

FIG. 13 depicts a method for entering data into a touch-sensitive screenenabled data entry device according to another embodiment; and

FIGS. 14A and 14B depict exemplary virtual keypads according toembodiments.

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS

Several embodiments of the present invention and their advantages may beunderstood by referring to FIGS. 1-14.

Embodiments are directed to touch-sensitive screen authentication code(e.g., a PIN) entry devices and methods. Although embodiments may bedisclosed in the context of the entry of a PIN, it should be recognizedthat the entry of any authentication code, including letters, numbers,gestures, etc. is also contemplated and within the scope of thisdisclosure, and the use of the term PIN should be recognized toencompass this other data.

Referring to FIG. 1, a touch-sensitive screen data entry device isdisclosed according to one embodiment. Data entry device 100 may includescreen 110, computer processor 115, memory 120, and speaker 125. Dataentry device 100 may interface with at least one network (not shown),such as communication networks, payment networks, etc. Other peripherals(e.g., input devices, displays, headphone jacks, Bluetooth interfaces,etc.) may be provided as necessary and/or desired.

In one embodiment, data entry device 110 may be a point of sale (POS)device.

In one embodiment, computer processor 115 may be any suitable processingmachine that executes the instructions that may be stored in internaland/or external memory or memories to process data. It may includegeneral purpose computer processors, specialized computer processors,integrated circuits, programmed microprocessors, micro-controllers,peripheral integrated circuit elements, a CSIC (Customer SpecificIntegrated Circuit), ASIC (Application Specific Integrated Circuit),other integrated circuits, digital signal processors, programmable logicdevices such as a FPGA, PLD, PLA or PAL, or any other suitable device orarrangement of devices.

In one embodiment, screen 110 may be a touch-sensitive screen device,and may be sensitive to a single touch, or to multiple touches. In oneembodiment, screen 110 may provide a user with tactile feedback, such ashaptic feedback. Feedback may be provided in response to the usertouching screen 110, in response to a user touching a virtual key onscreen 110, at certain orientation points on screen 110, etc.

In one embodiment, screen 110 may include a microcontroller or othercontroller that may sense and process touches and release of touches tothe surface of screen 110. In one embodiment, as used herein, computerprocessor 115 may refer to such a microcontroller or processor. Furtherthe functionality of sensing and processing touches and release oftouches may be divided between a microcontroller (or other controller)and computer processor 110.

In embodiments, processing on data sensed by screen 110 may performed bycomputer processor 115 and/or a computer processor, controller,microcontroller, etc. that may control the operation of screen 110.

In one embodiment, the user may be provided with audible feedback (e.g.,a low frequency hum) when the user is touching a touch-sensitive portionof screen 110.

In one embodiment, the strength of feedback provided via screen 110 mayvary depending on the distance of the touch from the center of screen110. For example, nearer the location on the touch-sensitive screen isto the center of screen 110, the greater the vibration frequency at thelocation. The user can thus sense the vibration pattern to position afinger in the center of the screen 110.

An example of such feedback is provided in FIG. 2. In FIG. 2, threelevels of feedback are disclosed; a greater or fewer number of feedbacklevels may be provided as is necessary and/or desired (e.g., F=high toF=low). And, although the feedback levels are depicted as circles, anysuitable shape or combinations thereof (e.g., oval, rectangular, basedon location of virtual keys, etc.) may be used as is necessary and/ordesired.

In one embodiment, the user may be guided by a vibration pattern towardsthe center of the touch-sensitive screen. For example, the user mayinitiate the device for operation by positioning, for example, one ormore fingers on the screen, which causes the screen to vibrate at alllocations. The nearer the location on the touch-sensitive screen is tothe center of the touch-sensitive screen, the greater the vibrationfrequency at the location. The user may sense the vibration pattern toposition a finger in the center of the touch-sensitive screen.

In one embodiment, when the device senses that the user is properlyoriented, a feedback signal, such as an audio prompt or haptic prompt,may signal the user to begin the authentication process (e.g., to enterthe first numeric digit of the PIN code).

Referring again to FIG. 1, in one embodiment, screen 110 may be providedwith bezel 112 or other surrounding (not shown) that may help inpositioning and/or orienting the user's fingers on screen 110. In oneembodiment, bezel 112 may be made of a different material and/or mayprovide a height difference from screen 110 to assist the user inknowing when the user is no longer touching screen 110.

Referring to FIG. 3, in one embodiment, bezel 112 may include one ororientation marks 310, such as dots, lines, etc. that may be orientationpoints for the user. In one embodiment, orientation marks 310 may beraised relative to the top surface of bezel 112; in another embodiment,orientation marks 310 may be depressions in the top surface of bezel112. In still another embodiment, orientation marks 310 may be made froma different material, may provide a different touch sensation (e.g.,spongy, temperature, vibration, etc.), from the top surface of bezel112, which may otherwise provide a uniform top surface. In still anotherembodiment, orientation marks 310 may comprise dynamic tactile bumps.

Referring to FIG. 4, a method for interacting with a touch-sensitivescreen data entry device is provided according to one embodiment.

The method may include optional step 405. In step 405, a user mayrequest that the data entry device enter an accessibility mode, wherebydata entry may be accomplished using an alternative method than the onethat the data entry device usually uses. For example, this may allow forthe selection of at least one of the embodiments disclosed here.

In one embodiment, the request may be made in any suitable manner,including by touch (e.g., touch a specific area of the screen, multipletouches (e.g., 3) within a predetermined time period, etc.). In oneembodiment, the data entry device may automatically enter accessibilitymode based on a received identification and a user preference. Forexample, if the user's preference is to enter accessibility mode, thedata entry device may enter accessibility mode whenever a transactioninvolving the user is initiated (e.g., in response to receipt of a cardswipe, chip card, NFC transmission, user biometric, detection of adevice registered to the user, etc.). For simplicity, in thisembodiment, when accessibility mode is entered in step 405, a data entrymethod is automatically selected. However, a person of skill in the artwill understand that in alternative embodiments, step 405 may includethe selection of a data entry method from amongst two or more data entrymethods.

In one embodiment, the data entry device may indicate that it is capableof entering accessibility mode to the user. In one embodiment, the dataentry device may make a sound (e.g., a chime) at the beginning of thetransaction, when the card is swiped or inserted, etc.

In one embodiment, accessibility mode may be manually selected by theuser entered at any time during the transaction.

In one embodiment, during a first use, or as necessary and/or desired,the data entry device may enter a “learning mode” in which the user'shandwriting, gestures, and characteristics thereof are learned andstored. In one embodiment, this data may be stored on the chip of atransaction card, or may be stored in, for example, the cloud.

In step 410, data entry device may provide an input interface for theuser. In one embodiment, the user may select from a menu the mode ofinput interface desired (e.g., virtual keypad, Braille entry, gestureentry, script entry, touch PIN entry, etc.). In one embodiment, the modemay be automatically selected based on a user preference. In stillanother embodiment, the data entry device may determine the mode fromuser interaction. In still another embodiment, a customer representativemay select the mode for the user via, for example, a second screen ofthe data entry device. In still another embodiment, the data entrydevice may only support one mode of an input interface.

In step 415, the user may enter an authentication code, such as a PIN,using the input interface. Exemplary embodiments of entering data usingvarious input interfaces are disclosed below.

In step 420, the data entry device, or a remote server, may determinewhether the data that is entered is correct. If it is, in step 425, thetransaction may continue.

If the first data entry is incorrect, in step 430, the user may be givena second attempt to enter correct data in step 435. If the second dataentry is correct, in step 425, the transaction may continue. In oneembodiment, the entered authentication code (e.g., a PIN code) may beencrypted before being transmitted to an authentication authority, suchas a credit card issuer, financial institution, etc.

In one embodiment, transaction data may also be provided to theauthenticating authority, either encrypted or unencrypted.

In one embodiment, the data entry device may verify the authenticationcode against data stored on the transaction card (e.g., on the chip), inthe cloud, etc.

The authentication authority may decrypt the entered data andtransaction data and may complete the authentication process.

If the second data entry is incorrect, in step 440, the data entrydevice may enter a training mode, in which the user may receive audibleinstruction on how to enter data using the input interface. In oneembodiment, the user may manually exit the training mode when desired. Aperson of skill in the art will understand that while this embodimentdescribes two incorrect entries triggering a training mode, any numberof incorrect attempts may be entered before the training mode isentered.

In one embodiment, training mode may be entered automatically forpredetermined number of initial uses of a card. During this period, thesystem may require additional authentication from the user toauthenticate the transaction. The entries provided during the trainingmode may become a baseline for comparison in the authentication mode,where a user may not need to provide additional authenticationinformation, based on the results of comparing a current signature inputwith the accumulated stored signature inputs provided during thelearning mode.

In one embodiment, learning and/or training may be performed off-line,using a mobile device, etc.

In step 445, the user may be given a third attempt to enter correctdata. If, in step 450, the third data entry is correct, in step 425, thetransaction may continue.

If the third data entry (or any suitable number of entries) isincorrect, in step 455, an account securing action, such as locking theaccount, may be performed by, for example, an authentication authoritysuch as the issuer of the financial instrument involved in thetransaction. In one embodiment, the data entry device may providespecific details of the transaction, data input attempts, biometrics,video, etc. to the authentication authority as necessary and/or desired.

Referring to FIG. 5, a method of authentication code entry using atouch-sensitive screen device is disclosed according to one embodiment.

In one embodiment, in optional step 505, the data entry device may enterthe accessibility mode. This may be similar to step 405, discussedabove.

In one embodiment, in optional step 510, an entry interface may bepresented.

In steps 515-525, the user may repeatedly touch the screen and releasethe touch with one or more fingers within a predefined manner. In oneexample, the total number of finger touches may equal a digit of anauthentication code entry, such as a PIN. For example, if the userwishes to enter the number “6,” the user may touch the screen with threefingers, then release or break the contact with the screen, and within apredetermined time period, may touch the screen again with threefingers. In entering a number, the user may use any combination offinger touches desired (e.g., six touches of a single finger, a firsttouch with four fingers and a second touch with 2 fingers. etc.). In oneembodiment, a zero may be represented by ten finger touches.

In one embodiment, it should be recognized that the touches and/orrelease do not have to be exactly simultaneous. In one embodiment, timeat which the touches occur, and/or the time at which the release occurs,may happen within a predetermined time in order to be consideredsimultaneous for purposes of this invention.

In one embodiment, the manner in which a user enters a digit may be partof the authentication process. For example, if the user desires to enterthe digit “6,” the user may register the entry pattern of two fingertouches, one finger touch, and three finger touches. Even though otherentry patterns may equal the digit “6”, such as two consecutive threefinger touches, or a single six finger touch, for authenticationpurposes, this may be rejected.

In one embodiment, the location at which the user touches the screen,the strength (e.g., pressure) of the touch, the timing of the touch,etc. may also be used in the authentication process.

When user has entered the desired sequence of touches, the user may notmake contact again with the touch-sensitive screen for a predeterminedperiod of time, in order for the sequence of touches to be recognized asan entry of a digit. In step 530, the data entry device may sum thefinger touches and record the corresponding number as a number in theauthentication code. In one embodiment, the data entry device may emit asound or other indicator indicating the successful entry of a digit, andmay display an indicator that a number was received (e.g., display anasterisk). Alternatively, instead of the touches representing specificdigits of the authentication code, the sequence of touches may representthe data entry that may be used to authenticate the user.

If there is an error (e.g., the sum is greater than 10 or the sequenceof touches is incorrect), no digits were entered, etc., in step 535, anerror message, for example a sound or dialog, may be played, and thedata entry for that number may be rejected and may be restarted. Thus,the data entry may be rejected independent of the authenticationsubmission.

If, in step 540, there are any additional digits or touches to enter,the process is repeated until all digits or touches are entered. If alldigits are received, in step 545, the authentication code may besubmitted to an authentication authority (e.g., an issuer) for approval.In one embodiment, the authentication code may be encrypted before beingtransmitted.

In one embodiment, the data entry device may verify the authenticationcode against data stored on the transaction card (e.g., on the chip), inthe cloud, etc.

In one embodiment, a sequence of touches may comprise an authenticationcode. For example, a first number of touches may represent a firstentry, a second number of touches may represent a second entry, a thirdnumber of touches may represent a third entry, a fourth number oftouches may represent a fourth entry, etc. Each entry may be independentof a number or digit; instead, the pattern as well as other data (e.g.,location of touches, timing of touches, strength (e.g., pressure) oftouches, etc.) may be used to authenticate the user.

In one embodiment, transaction data may also be provided to theauthenticating authority, either encrypted or unencrypted.

As discussed above, if the authentication code is incorrect, the processmay be repeated, and if unsuccessful, the user may receive training.

Referring to FIG. 6, a method of authentication code entry using atouch-sensitive screen device is disclosed according to one embodiment.

In one embodiment, in optional step 605, the data entry device may enterthe accessibility mode. This may be similar to step 405, discussedabove.

In one embodiment, in optional step 510, an entry interface may bepresented.

In step 615, the data entry device may provide an input interface thatmay include four quadrants. In one embodiment, the delineations betweenthe quadrants may be displayed on the screen. In another embodiment,tactile feedback may be provided to delineate the quadrants. In stillanother embodiment, the quadrants may not be defined until data entry isreceived, thereby allowing the user to define the quadrants.

The user may then touch one or more of the quadrants substantiallysimultaneously. In one embodiment, the user may touch the screen usingthe International Standardized Braille number pattern, provided in FIG.7. Other patterns, including user-defined patterns, may be used as isnecessary and/or desired.

Referring again to FIG. 6, in step 620, the received touch may bedecoded based on the pattern.

In step 625, if the touch corresponds to a registered pattern number, instep 630, the corresponding number may be recorded. In one embodiment,the data entry device may emit a sound or other indicator indicating thesuccessful entry of a digit, and may display an indicator that a numberwas received (e.g., display an asterisk).

If the touch does not correspond to a registered pattern number, in step635, an error message, for example a sound or dialog, may be played, andthe process may be repeated.

If, in step 640, if there are additional digits to enter, the process isrepeated until all digits are entered. If all digits are received, instep 640, the authentication code may be submitted to an authenticationauthority (e.g., an issuer) for approval. In one embodiment, theauthentication code may be encrypted before being transmitted.

In one embodiment, transaction data may also be provided to theauthenticating authority, either encrypted or unencrypted.

In one embodiment, the data entry device may verify the authenticationcode against data stored on the transaction card (e.g., on the chip), inthe cloud, etc.

As discussed above, if the authentication code is incorrect, the processmay be repeated, and if unsuccessful, the user may receive training.

Referring to FIG. 8, a method of authentication code entry using atouch-sensitive screen device is disclosed according to one embodiment.

In one embodiment, in step 805, the data entry device may enter theaccessibility mode. This may be similar to step 405, discussed above.

In one embodiment, in optional step 810, an entry interface may bepresented.

In step 815, the user may enter a gesture. In one embodiment, thegesture may be based on the International Standardized Braille pattern.An example of number patterns are provided in FIG. 9.

Other patterns, including user-defined patterns for numbers, letters,shapes, and/or symbols, may be used as is necessary and/or desired.

In one embodiment, the gesture may be a scribble of a digit, character,shape, or symbol. For example, the user may scribble any number on thescreen.

In another embodiment, the gesture may comprise one or more touches atone or more locations.

In one embodiment, the gesture may comprise an actual signature of theuser, or it may be the digits of an authentication code or othersymbols, such as the Braille representation of the digits comprising theuser's PIN code.

Referring again to FIG. 8, in step 820, the received gesture may bedecoded based on the registered pattern.

In one embodiment, the data entry device may apply an algorithm todecode the gesture. Any suitable algorithm that may decode writingreceived at a touch-sensitive screen may be used.

In one embodiment, the analysis of the gesture may take into accountspeed, writing style, location, timing, and/or pressure. In oneembodiment, one or more of these characteristics may be compared to dataobtained during learning or in prior authentications as anotherauthentication check.

For example, if the stored data indicates that the user normally writesa “1” with a downward stroke, and the “1” was received with an upwardstroke, additional authentication may be required.

In step 825, if the gesture corresponds to a registered pattern, in step830, the corresponding number, character, shape, and/or symbol may berecorded. In one embodiment, the data entry device may emit a sound orother indicator indicating the successful entry of a digit, and maydisplay an indicator that a number was received (e.g., display anasterisk).

If the gesture does not correspond to a registered pattern for a number,character, shape, and/or symbol, in step 835, an error message and/orsound may be played, and the process may be repeated. Thus, the gesturemay be rejected independent of the authentication submission.

If, in step 840, if there are additional digits, characters, shapes,and/or symbols to enter, the process is repeated until all digits areentered. If all digits, characters, shapes, and/or symbols are received,in step 840, the authentication code may be submitted to anauthentication authority (e.g., an issuer) for approval. In oneembodiment, the authentication code may be encrypted before beingtransmitted.

In one embodiment, transaction data may also be provided to theauthenticating authority, either encrypted or unencrypted.

In one embodiment, the data entry device may verify the authenticationcode against data stored on the transaction card (e.g., on the chip), inthe cloud, etc.

In one embodiment, the speed, writing style, and pressure may be savedfor reference in future transactions. In one embodiment, it may bestored in the data entry device memory, in the cloud, on a chip on thetransaction device, etc.

As discussed above, if the authentication code is incorrect, the processmay be repeated, and if unsuccessful, the user may receive training.

Referring to FIG. 10, a method of authentication code entry using atouch-sensitive screen device is disclosed according to one embodiment.

In one embodiment, four virtual keys may be used. In another embodiment,six virtual keys may be used. In another embodiment, any suitable numberof virtual keys may be used. Letters, numbers, shapes, and/or symbolsmay be entered using the embodiments disclosed herein.

In one embodiment, in optional step 1005, the data entry device mayenter the accessibility mode. This may be similar to step 405, discussedabove.

In step 1010, virtual keys may be presented on the screen. In oneembodiment, the boundaries of the virtual keys may be delineated using,for example, haptic feedback, audio feedback, or in any other suitablemanner.

In one embodiment, the virtual keys may be static or fixed. Theposition, size, and/or orientation of the virtual keys may be set by theuser as part of a registration process.

In another embodiment, the virtual keys may “float.” For example, thelocation of the virtual keys may be based on the locations at which theuser touches the screen. In one embodiment, the virtual keys may move asthe user's fingers move on the screen. If the virtual keys are within apredetermined distance of each other, a warning message, feedback, etc.may be provided to instruct the user to move his or her fingers furtherapart.

Examples of virtual keys are disclosed in FIGS. 11A and 11B. In FIGS.11A and 11B, four keys 1110 are provided; additional or fewer keys 1110may be provided as necessary and/or desired. In addition, the size,shape, and/or orientation of keys 1110 may vary as is necessary and/ordesired. As noted above, the position of keys 1110 may “float” dependingon points at which the touchscreen-sensitive device is touched.

In one embodiment, the virtual keys may not be displayed on thetouch-sensitive screen.

Each key 1110 may be associated with a key on a Braille typewriter. Forexample, from left to right, keys 1110 may correspond to keys 2, 1, 4,and 5 on a Braille typewriter.

The user may select one or more virtual keys based on a pattern, such asthat used by a Braille typewriter. An example pattern is shown in FIG.12. Other patterns, including user-defined patterns, may be used as isnecessary and/or desired.

In step 1015, the virtual keystroke(s) may be decoded based on thepattern.

In step 1020, if the virtual keystroke(s) correspond to a registeredpattern number, in step 1025, the corresponding number may be recorded.In one embodiment, the data entry device may emit a sound or otherindicator indicating the successful entry of a digit, and may display anindicator that a number was received (e.g., display an asterisk).

If the virtual keystroke(s) does not correspond to a registered patternnumber, in step 1030, an error message, for example a sound or otherdialog, may be played, and the process may be repeated.

If, in step 1035, if there are additional digits to enter, the processis repeated until all digits are entered. If all digits are received, instep 1040, the authentication code may be submitted to an authenticationauthority (e.g., an issuer) for approval. In one embodiment, theauthentication code may be encrypted before being transmitted.

In one embodiment, transaction data may also be provided to theauthenticating authority, either encrypted or unencrypted.

In one embodiment, the data entry device may verify the authenticationcode against data stored on the transaction card (e.g., on the chip), inthe cloud, etc.

As discussed above, if the authentication code is incorrect, the processmay be repeated, and if unsuccessful, the user may receive training.

Referring to FIG. 13, a method of authentication code entry using atouch-sensitive screen device is disclosed according to one embodiment.

In one embodiment, in optional step 1305, the data entry device mayenter the accessibility mode. This may be similar to step 405, discussedabove.

In step 1310, a virtual keypad may be displayed on the screen. Examplesof suitable virtual keypads are disclosed in FIGS. 14A and 14B. In oneembodiment, each virtual keypad may comprise a plurality of virtualkeys. Each virtual key may define an area on the touch-sensitive screenthat may be associated with a number, character, command, or symbol.

In one embodiment, the virtual keys may not be displayed on thetouch-sensitive screen.

In step 1315, the user may touch the screen at any location. In optionalstep 1320, feedback may be provided as the user contacts each virtualkey. For example, a sound may be played (e.g., a ding, beep, etc.) asthe user touches each virtual key; haptic feedback may be provided, etc.

For example, in one embodiment, as user may start by touching the screenwith a finger at the upper left corner of the screen (e.g., touching the“1” virtual key in FIG. 14A). The user may then start moving his or herfinger to the right. As each virtual key is contacted (e.g., 1, 2, 3),feedback may be provided. By detecting this feedback, the user maydetermine the position of his or her finger on the keypad and thevirtual key that the user is contacting.

In one embodiment, the feedback may be tactile (e.g., haptic feedback),audio feedback (e.g., a beep, chime, etc.).

In step 1325, once the user releases contact with the screen, in step1330, the data entry device may note the last virtual key that the userwas in contact with at the time of the release.

In step 1335, if an entry gesture is received (e.g., two quick taps, aselection of the “enter” virtual key, a gesture such as a checkmarkdrawn on the screen, etc.), in step 1340, the number of the last virtualkey touched prior to the entry gesture is entered as a digit in theauthentication code. If an entry gesture is not received, the lastprocess is repeated until an entry gesture is received.

In one embodiment, the location at which the entry gesture is receivedmay be different from the location of the virtual key that is beingentered. In other words, regardless of where the entry gesture isprovided on the screen, the number that is entered is the numberassociated with the last virtual key touched before the entry gesture isreceived.

In one embodiment, the entry gesture may be performed on the desiredkey. For example, the use may touch the virtual key with the entrygesture in order for the digit to be entered.

If, in step 1345, there are additional digits to enter, the process isrepeated until all digits are entered. If all digits are received, instep 1350, the authentication code may be submitted to an authenticationauthority (e.g., an issuer) for approval, either encrypted orunencrypted.

In one embodiment, transaction data may also be provided to theauthenticating authority, either encrypted or unencrypted.

In one embodiment, the data entry device may verify the authenticationcode against data stored on the transaction card (e.g., on the chip), inthe cloud, etc.

As discussed above, if the authentication code is incorrect, the processmay be repeated, and if unsuccessful, the user may receive training.

In one embodiment, certain gestures may be used to represent certainfunctions. For example, a swipe of the screen with the palm of a hand ora large “X” may be recognized as a “cancel operation and restart.” Aquestion mark may be recognized as the equivalent of pressing a “help”key. A check mark may be recognized as the equivalent of pressing an“enter” key. Additionally gestures, including user-defined gestures, maybe used as is necessary and/or desired.

In one embodiment, in addition to a standard database of alphanumericcharacters, Braille characters, etc. for recognizing characters enteredby a user, a database of alternative characters that approximatestandard characters as they may be entered by a person with impairedmotor skills. For example, if the user is recognized as a person withimpaired motor skills, the system may first compares the entry with thestandard database and, in the event a match is not found, may thencompare the entry with the characters entered in the special database.For example, while a non-impaired user may write a “1” as a singlevertical stroke, an impaired user may write a “1” as a series ofnon-connected vertical strokes or dots.

Machine learning may be used to assist in future recognition of a user'sspecific handwriting style. For example, in one embodiment, a cloudbased authentication process may include an entered signature and theunique characteristics thereof being sent to a remote server or cloudserver. In training mode, a learning algorithm may register the enteredsignature and/or the unique characteristics thereof, and may store thesignature and/or the characteristics in a database. It may furtherrequest additional authentication information from the user to proceedwith the transaction.

In an authentication mode, the server may compares the entered signatureand/or the entered signature characteristics stored signature and/orstored characteristics. It may assign an authentication score based onthe comparison, and may provide a prompt to the system associated withthe touch screen based on the score. If the score is above apredetermined threshold, the transaction is approved. If not, thetransaction may be rejected or conditionally rejected and additionalauthentication may be requested from the user.

In one embodiment, the data entry device, and/or a server associatedtherewith, may include, in an authentication mode, a scoring subsystemthat may provide an authentication score, based on a comparison of thecurrently input signature and the characteristics thereof with thesignature and characteristics thereof which were recorded and storedduring the training and/or learning mode operation. The transaction maybe (1) accepted as having been authenticated when the authenticationscore exceeds a predetermined acceptance threshold; (2) conditionallyrejected pending additional authentication, which may then be requestedfrom the user when the authentication score does not exceed the firstpredetermined threshold but does exceed a second predeterminedthreshold, lower than the first predetermined threshold; or (3) rejectedwhen the authentication score fails to exceed the second predeterminedthreshold.

In one embodiment, the data entry device may be operative to disregardaccidental screen touches. For example, when a user is positioning oneor more fingers on the screen, the accidental touch functionality may beoperative to compare the size of the area being touched to differentiatebetween a finger touch and a palm touch. The data entry device mayfurther capture finger touches when the fingers are removed from thescreen, rather when they first touch the screen. This may reduce theoccurrence of incorrectly located screen touches, since the user mayreposition the finger prior to removal.

It will be appreciated by persons skilled in the art that the presentinvention is not limited by what has been particularly shown anddescribed hereinabove. Rather the scope of the present inventionincludes both combinations and sub-combinations of features describedhereinabove and variations and modifications thereof which are not inthe prior art. It should further be recognized that these embodimentsare not exclusive to each other.

It will be readily understood by those persons skilled in the art thatthe embodiments disclosed here are susceptible to broad utility andapplication. Many embodiments and adaptations of the present inventionother than those herein described, as well as many variations,modifications and equivalent arrangements, will be apparent from orreasonably suggested by the present invention and foregoing descriptionthereof, without departing from the substance or scope of the invention.

Accordingly, while the present invention has been described here indetail in relation to its exemplary embodiments, it is to be understoodthat this disclosure is only illustrative and exemplary of the presentinvention and is made to provide an enabling disclosure of theinvention. Accordingly, the foregoing disclosure is not intended to beconstrued or to limit the present invention or otherwise to exclude anyother such embodiments, adaptations, variations, modifications orequivalent arrangements.

What is claimed is:
 1. A method for entering data to a data entry devicecomprising at least one computer processor and a touch-sensitive screen,comprising: the touch-sensitive screen sensing a first input comprisingat least one finger touch; the touch-sensitive screen sensing a releaseof the first input; the at least one computer processor determining afirst number of finger touches in the first input; the at least onecomputer processor using the first number of finger touches to identifya first portion of an authentication code; the touch-sensitive screensensing, within a predetermined period of time from the release of thefirst input, a second input comprising at least one finger touch; thetouch-sensitive screen sensing a release of the second input; the atleast one computer processor determining a second number of fingertouches in the second input; the at least one computer processor usingthe second number of finger touches to identify a second portion of theauthentication code; and the at least one computer processor calculatinga sum of at least the first number of finger touches and the secondnumber of finger touches, wherein the sum represents a value in theauthentication code.
 2. The method of claim 1, wherein a manner ofreceiving the first number of finger touches and the second number offinger touches is part of the authentication code.
 3. The method ofclaim 1, wherein the data entry device comprises a point of sale device.4. The method of claim 1, further comprising: the at least one computerprocessor causing feedback to be provided in response to the sensing ofan entry gesture.
 5. The method of claim 1, further comprising: thetouch-sensitive screen sensing an entry gesture; wherein the sensing ofthe entry gesture causes the at least one computer processor tocalculate the sum of the at least the first number of finger touches andthe second number of finger touches.
 6. A data entry device comprising:a touch-sensitive screen; a memory; and at least one computer processor;wherein: the touch-sensitive screen senses a first input comprising atleast one finger touch; the touch-sensitive screen senses a release ofthe first input; the at least one computer processor determines a firstnumber of finger touches in the first input; the at least one computerprocessor uses the first number of finger touches to identify a firstportion of an authentication code; the touch-sensitive screen senses,within a predetermined period of time from the release of the firstinput, a second input comprising at least one finger touch; thetouch-sensitive screen senses a release of the second input; the atleast one computer processor determines a second number of fingertouches in the second input; the at least one computer processor usesthe second number of finger touches to identify a second portion of theauthentication code; the at least one computer processor calculates asum of at least the first number of finger touches and the second numberof finger touches, wherein the sum represents a value in theauthentication code.
 7. The data entry device of claim 6, wherein amanner of receiving the first number of finger touches and the secondnumber of finger touches is part of the authentication code.
 8. The dataentry device of claim 6, wherein the data entry device comprises a pointof sale device.
 9. The data entry device of claim 6, wherein at leastone of the at least one computer processor comprises a touch-sensitivescreen controller.
 10. The system of claim 6, wherein the at least onecomputer processor causes feedback to be provided in response to thesensing of an entry gesture.
 11. A method for entering data to a dataentry device comprising at least one computer processor and atouch-sensitive screen, comprising: the touch-sensitive screen sensing afirst input comprising at least one finger touch; the touch-sensitivescreen sensing a release of the first input; the at least one computerprocessor determining a first number of finger touches in the firstinput; the at least one computer processor using the first number offinger touches to identify a first portion of an authentication code;the touch-sensitive screen sensing a second input comprising at leastone finger touch; the touch-sensitive screen sensing a release of thesecond input; the at least one computer processor determining a secondnumber of finger touches in the second input; the at least one computerprocessor using the second number of finger touches to identify a secondportion of the authentication code; the touch-sensitive screen sensingan entry gesture; and in response to the sensing of the entry gesture,the at least one computer processor calculating a sum of at least thefirst number of finger touches and the second number of finger touches,wherein the sum represents a value in the authentication code.
 12. Themethod of claim 11, wherein a manner of receiving the first number offinger touches and the second number of finger touches is part of theauthentication code.
 13. The method of claim 11, wherein the data entrydevice comprises a point of sale device.
 14. The method of claim 11,further comprising: the at least one computer processor causing feedbackto be provided in response to the sensing of the entry gesture.